CVE-2010-4539

The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger the walking of SVNParentPath collections.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.8 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:N/I:N/A:C
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 77%
VendorProductVersion
apachesubversion
𝑥
≤ 1.6.14
apachesubversion
0.6
apachesubversion
0.7
apachesubversion
0.8
apachesubversion
0.9
apachesubversion
0.10.0
apachesubversion
0.10.1
apachesubversion
0.10.2
apachesubversion
0.11.1
apachesubversion
0.12.0
apachesubversion
0.13.0
apachesubversion
0.13.1
apachesubversion
0.13.2
apachesubversion
0.14.0
apachesubversion
0.14.1
apachesubversion
0.14.2
apachesubversion
0.14.3
apachesubversion
0.14.4
apachesubversion
0.14.5
apachesubversion
0.15
apachesubversion
0.16
apachesubversion
0.16.1
apachesubversion
0.17.0
apachesubversion
0.17.1
apachesubversion
0.18.0
apachesubversion
0.18.1
apachesubversion
0.19.0
apachesubversion
0.19.1
apachesubversion
0.20.0
apachesubversion
0.20.1
apachesubversion
0.21.0
apachesubversion
0.22.0
apachesubversion
0.22.1
apachesubversion
0.22.2
apachesubversion
0.23.0
apachesubversion
0.24.0
apachesubversion
0.24.1
apachesubversion
0.24.2
apachesubversion
0.25.0
apachesubversion
0.26.0
apachesubversion
0.27.0
apachesubversion
0.28.0
apachesubversion
0.28.1
apachesubversion
0.28.2
apachesubversion
0.29.0
apachesubversion
0.30.0
apachesubversion
0.31.0
apachesubversion
0.32.1
apachesubversion
0.33.0
apachesubversion
0.33.1
apachesubversion
0.34.0
apachesubversion
0.35.0
apachesubversion
0.35.1
apachesubversion
0.36.0
apachesubversion
0.37.0
apachesubversion
1.0.0
apachesubversion
1.0.1
apachesubversion
1.0.2
apachesubversion
1.0.3
apachesubversion
1.0.4
apachesubversion
1.0.5
apachesubversion
1.0.6
apachesubversion
1.0.7
apachesubversion
1.0.8
apachesubversion
1.0.9
apachesubversion
1.1.0
apachesubversion
1.1.1
apachesubversion
1.1.2
apachesubversion
1.1.3
apachesubversion
1.1.4
apachesubversion
1.2.0
apachesubversion
1.2.1
apachesubversion
1.2.2
apachesubversion
1.2.3
apachesubversion
1.3.0
apachesubversion
1.3.1
apachesubversion
1.3.2
apachesubversion
1.4.0
apachesubversion
1.4.1
apachesubversion
1.4.2
apachesubversion
1.4.3
apachesubversion
1.4.4
apachesubversion
1.4.5
apachesubversion
1.4.6
apachesubversion
1.5.0
apachesubversion
1.5.1
apachesubversion
1.5.2
apachesubversion
1.5.3
apachesubversion
1.5.4
apachesubversion
1.5.5
apachesubversion
1.5.6
apachesubversion
1.5.7
apachesubversion
1.5.8
apachesubversion
1.6.0
apachesubversion
1.6.1
apachesubversion
1.6.2
apachesubversion
1.6.3
apachesubversion
1.6.4
apachesubversion
1.6.5
apachesubversion
1.6.6
apachesubversion
1.6.7
apachesubversion
1.6.8
apachesubversion
1.6.9
apachesubversion
1.6.10
apachesubversion
1.6.11
apachesubversion
1.6.12
apachesubversion
1.6.13
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
subversion
bullseye (security)
1.14.1-3+deb11u1
fixed
bullseye
1.14.1-3+deb11u1
fixed
lenny
no-dsa
bookworm
1.14.2-4
fixed
sid
1.14.4-2
fixed
trixie
1.14.4-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
subversion
maverick
Fixed 1.6.12dfsg-1ubuntu1.1
released
lucid
Fixed 1.6.6dfsg-2ubuntu1.1
released
karmic
Fixed 1.6.5dfsg-1ubuntu1.1
released
hardy
Fixed 1.4.6dfsg1-2ubuntu1.2
released
dapper
Fixed 1.3.1-3ubuntu1.3
released
Common Weakness Enumeration
References